PT-2016-1705
CVE-2016-4015
·
تاريخ النشر
2016-04-14
·
تاريخ التحديث
2018-12-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver JAVA AS versions 7.1 through 7.4
Description
The issue is related to errors in the code of the Enqueue Server component in SAP NetWeaver. It allows remote attackers to cause a denial of service, specifically a process crash, via a crafted request.
Recommendations
For SAP NetWeaver JAVA AS versions 7.1 through 7.4, consider applying the fix as described in SAP Security Note 2258784 to resolve the issue.
As a temporary workaround, consider restricting access to the Enqueue Server component to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾